Application Security Engineer - North Central region

📋 Description

• Run and tune client SAST, DAST, SCA, secrets, and IaC scanning tools; triage results, eliminate
• Design and implement security tool integrations into CI/CD pipelines (e.g., GitHub Actions, GitLab
• Partner with development teams on remediation, secure coding guidance, and developer enablement to
• Assess and harden software supply chain controls, including SBOM generation, dependency and
• Perform threat modeling and security architecture reviews for cloud-native, microservice, container
• Leverage AI-assisted and agentic tooling (e.g., AI code assistants, automated triage, and

🎯 Requirements

• 1–3+ years of experience in Application Security, DevSecOps, or software development with a
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive
• Hands-on experience with SAST, DAST, and SCA tools and integrating them into CI/CD pipelines (e.g.
• Proficiency with manual testing tools such as Burp Suite Pro and a strong understanding of the
• Strong working knowledge of secure development lifecycles and experience guiding remediation of
• Ability to review source code in one or more languages such as JavaScript/TypeScript, Python, Java

🎁 Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of premium for
• Group Dental Insurance: GuidePoint pays 100% of premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment